Skip to content
OpenAdvisories

Vendor

amazon

63 known vulnerabilities.

Products

Amazon Athena ODBC driver 6 data.all 5 Amazon Aurora PostgreSQL with Babelfish 3 strands-agents-tools 3 Amazon Redshift JDBC Driver 2 Fire TV Stick 3rd gen 2 Kiro IDE 2 ion-c 2 WorkSpaces Client 2 awslabs.dynamodb-mcp-server 1 log4j-cve-2021-44228-hotpatch 1 Amazon WorkSpaces 1 ECS 1 Redshift 1 Q Developer VS Code Extension 1 FreeRTOS 1 Kiro CLI 1 amazon-connect-salesforce-lambda 1 Deep Java Library 1 AWS SDK 1 amazon-braket-schemas 1 Amazon Redshift Python Connector 1 ion-java 1 aws-load-balancer-controller 1 Aurora MySQL 1 RDS for MySQL 1 RDS for MariaDB 1 Amazon Ion Dotnet 1 ion-python 1 Cloud Cam 1 ca-certificates 1 AWS EFS CSI Driver 1 postgres-mcp-server 1 amazon-ssm-agent 1 Amazon.ApplicationLoadBalancer.Identity.AspNetCore Middleware 1 AWS ALB Route Directive Adapter For Istio 1 EMR 1 Amazon.Extensions.S3.Encryption 1 Amazon OpenSearch Service 1 Amplify Studio 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-119923

    Heap-based Buffer Overflow in Babelfish for PostgreSQL TDS Prelogin Parser

    A heap-based buffer overflow in the TDS prelogin parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote attackers to execute arbitrary OS comman…

    AWS amazon Amazon Aurora PostgreSQL with Babelfish babelfish-for-postgresql
  • Critical 9.9
    CVE-2026-112380

    Missing authorization in the WhatsApp channel in Kiro Crew

    Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operator-configured WhatsApp group to control the operator's other agent sessions and execute arbitrary commands on the host running Kiro Crew vi…

    amazon Kiro Crew
  • Critical 9.1
    CVE-2026-85228

    Integer overflow in tensor buffer validation in Deep Java Library

    An integer overflow in the tensor buffer validation component in Amazon Deep Java Library (DJL) from 0.13.0 through 0.36.0 on all platforms might allow a remote unauthenticated actor to obtain information from adjacent process memory or cause a denial of serv…

    amazon Deep Java Library
  • Critical 9.0
    CVE-2025-4318

    Input validation issue in AWS Amplify Studio UI component properties

    The AWS Amplify Studio UI component property expressions in the aws-amplify/amplify-codegen-ui package lack input validation. This could potentially allow an authenticated user who has access to create or modify components to run arbitrary JavaScript code dur…

    amazon Amplify Studio @aws-amplify/codegen-ui-react npm